We don't have many rules here at the JavaRanch, but we do insist that you use your Real Name and not some sort of "handle" or obvious alias. If you're not sure about this, see
http://www.javaranch.com/name.jsp .

I make it a policy not to answer questions until people have their display names in order, but I will say that this is not a Tomcat problem. You have an error in your code which will fail on any J2EE server, not just Tomcat. And provided one more example why it's not a good idea to write your own login/security code.

Customer surveys are for companies who didn't pay proper attention to begin with.